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Question: 1 


Which security technique should be implemented to remediate after a threat is discovered? 


. NGIPS ruleset 

. retrospection 

. web security deployment 
. application control 
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Answer: B 


Question: 2 


Refer to the exhibit. 


class class-defaulit 
sfr fail-close 


i 
service-policy asasfr policy interface outside 


Which statement describes the effect of the configuration? 


A. The SFR is configured to passively inspect traffic on all adaptive security appliance interfaces. 

B. If the SFR fails, redirected traffic that matches the service policy from the outside will be dropped. 
C. If the SFR fails, all traffic from the outside will be dropped. 

D. The SFR is configured as an inline inspector of traffic on all adaptive security appliance interfaces. 


Answer: B 


Question: 3 


Which option is correct for configuring the SRF for passive, out-of-band traffic evaluation? 


. Sfr fail-close oob 

. sfr monitor-only 

. sfr fail-open monitor-only 
. Sfr passive-mode 
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Answer: B 


Question: 4 


An SFR module has been installed in the adaptive security appliance. Which command must be 
executed on the module to establish connectivity to FireSIGHT Management Center? 
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. system install manager 

. config manager fmc host 
. config manager add 

. system manager fmc 
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Answer: B 


Question: 5 


Which three policy types are configured using Fire SIGHT Management Center? (Choose three.) 


A. remote access 

B. file 

C. health 

D. network discovery 
E. malware 

F. access list 

G. firewall 


Answer: B, C, D 
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